Even the old advice not to give out info unless you placed the call is
> now obsolete because the crooks are sending fake phone numbers via > email.
Not at all, you just need to call a known-good number. You don't just dial any number you're given, but rather, you need to dial the number on the back of your bank card to contact your bank.
Some mistakes are too fun to make only once.